Re: Prevent Backscatter

2017-01-23 Thread Postfix User
feed him for a lifetime. -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88413.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-22 Thread Wietse Venema
Postfix User: > Postfix User wrote > > I am trying to reject instead of sending bounce message back when email > > arrives to non existing account at domains hosted by my server. > > Anyone having similar problem, check_recipient_access map fixed my problem That is bad advice that covers up a

Re: Prevent Backscatter

2017-01-22 Thread Postfix User
name='%u' AND u.domain='%d' AND u.active='1'; -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88404.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-22 Thread Postfix User
omains.cf virtual_alias_domains.cf query = SELECT u.domain FROM users u WHERE u.username='%u' AND u.domain='%d' AND u.active='1'; -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88391.html Sent from the Postfix Users mailing lis

Re: Prevent Backscatter

2017-01-22 Thread Postfix User
ame with the from address ) Fromremote address To local address Action OK Not authenticated sender Fromany To local address Action OK Fromremote address To remote address Action REJECT -

Re: Prevent Backscatter

2017-01-21 Thread Wietse Venema
Wietse Venema: > Postfix User: > > smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, > > reject_unauth_destination > > This will be an open relay if all your SMTP mail is logged with the > same client IP address, i.e. your SMTP mail comes from some box > that is in

Re: Prevent Backscatter

2017-01-21 Thread Postfix User
only trusted people that have direct access to the server or authenticated webmail users can send from localhost -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88388.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-21 Thread Wietse Venema
Postfix User: > smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, > reject_unauth_destination This will be an open relay if all your SMTP mail is logged with the same client IP address, i.e. your SMTP mail comes from some box that is in mynetworks, and Postfix never sees

Re: Prevent Backscatter

2017-01-21 Thread Postfix User
iew this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88386.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-21 Thread Postfix User
You are right, there are no recipient restrictions, except permit_sasl_authenticated restricting remote recipients for authenticated clients only. -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88385.html Sent from the Postfix Users mailing

Re: Prevent Backscatter

2017-01-21 Thread Postfix User
herefore, "check_sender_access $virtual_alias_maps" is rather > wrong. > > -- > Viktor. -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88384.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-21 Thread Charles Marcus
/private/domain.com.key >smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache >smtpd_use_tls = yes >virtual_alias_maps = mysql:/etc/postfix/sqlconf/virtual_mailbox_maps.cf >virtual_mailbox_domains = mysql:/etc/postfix/sqlconf/mydestination.cf >virtual_transp

Re: Prevent Backscatter

2017-01-21 Thread Viktor Dukhovni
On Sat, Jan 21, 2017 at 04:38:57AM -0700, Postfix User wrote: > Bastian Blank-3 wrote > > On Fri, Jan 20, 2017 at 02:01:27PM -0700, Postfix User wrote: > >> check_sender_access $virtual_alias_maps, > > > > You are creating an open relay, don't do that. > > Actually I am not creating an

Re: Prevent Backscatter

2017-01-21 Thread Postfix User
ses. When I try sending e-mail from not authenticated internal user to external address, or from external to another external address, I get "554 5.7.1 <recipient@domain>: Relay access denied" -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatt

Re: Prevent Backscatter

2017-01-20 Thread Postfix User
.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88372.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-20 Thread Bastian Blank
On Fri, Jan 20, 2017 at 02:01:27PM -0700, Postfix User wrote: > check_sender_access $virtual_alias_maps, You are creating an open relay, don't do that. > #smtpd_tls_auth_only = yes This is _not_ the postconf -n output we where asking for. Bastian -- Those who hate and fight must stop

Re: Prevent Backscatter

2017-01-20 Thread Noel Jones
On 1/20/2017 3:01 PM, Postfix User wrote: > Thanks for the reply, > > Just made the changes you suggested. I set relay_domains to empty, because > all domains are served by the same server. Again I sent a message to non > existing account, and I am still getting "250 2.1.5 Ok" instead of a reject

Re: Prevent Backscatter

2017-01-20 Thread Postfix User
lhost:8891 non_smtpd_milters = inet:localhost:8891 -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359p88369.html Sent from the Postfix Users mailing list archive at Nabble.com.

Re: Prevent Backscatter

2017-01-20 Thread Wietse Venema
IN next n ON n.id = u.id WHERE u.username='%u' > AND u.domain='%d' AND u.active='1'; > hosts = 127.0.0.1 > > I tried adding reject_unverified_recipient under > smtpd_recipient_restrictions, but after entering non existing username at > existing domain, there was 1 second delay, and I still get &quo

Prevent Backscatter

2017-01-20 Thread Postfix User
smtpd_recipient_restrictions, but after entering non existing username at existing domain, there was 1 second delay, and I still get "250 2.1.5 Ok" message. Regards, Robin -- View this message in context: http://postfix.1071664.n5.nabble.com/Prevent-Backscatter-tp88359.html Sent from the Postfix Users ma